Remove JWK Validation

Removes the JWK (JSON Web Key) assignment for validation and signing from a credential. The credential will no longer use the JWK for JWT signature verification or token signing. The credential is automatically deployed to all environments after the JWK is removed.

​

Endpoint

DELETE /apiops/projects/{projectName}/credentials/{username}/jwk/validation/

​

Authentication

Requires a Personal API Access Token.

​

Header

Authorization: Bearer YOUR_TOKEN

​

Request

​

Headers

Header	Value	Required
Authorization	Bearer	Yes

​

Path Parameters

Parameter	Type	Required	Description
projectName	string	Yes	Project name
username	string	Yes	Username of the credential

​

Notes

• Credential must exist
• Credential must have a JWK assigned for validation and signing, otherwise the operation returns an error

​

Response

​

Success Response (200 OK)

{
  "success": true,
  "deploymentResult": {
    "success": true,
    "message": "Deployment completed successfully",
    "environmentResults": [
      {
        "environmentName": "production",
        "success": true,
        "message": "Deployed successfully"
      },
      {
        "environmentName": "staging",
        "success": true,
        "message": "Deployed successfully"
      }
    ]
  }
}

​

Error Response (400 Bad Request)

{
  "error": "bad_request",
  "error_description": "Credential (username: api-user) was not found!"
}

​

Error Response (401 Unauthorized)

{
  "error": "unauthorized_client",
  "error_description": "Invalid token"
}

​

Error Response (404 Not Found)

{
  "error": "not_found",
  "error_description": "Project(MyProject) was not found or user does not have privilege to access it!"
}

​

cURL Example

curl -X DELETE \
  "https://demo.apinizer.com/apiops/projects/MyProject/credentials/api-user/jwk/validation/" \
  -H "Authorization: Bearer YOUR_TOKEN"

​

Notes and Warnings

• Credential Requirements:

  • Credential must exist
  • Credential must have a JWK assigned for validation and signing, otherwise the operation returns a 400 error

• Automatic Deployment:

  • Credential is automatically deployed to all environments after JWK removal
  • Deployment results are returned in the response

• No Impact on JWK:

  • The JWK itself is not deleted
  • Only the assignment to the credential is removed

• Impact on JWT Operations:

  • Removing JWK may affect JWT signature verification and token signing
  • Ensure alternative JWK is configured if needed

​

Permissions

• User must have IDENTITY + MANAGE permission in the project
• For automatic deployment, user must also have IDENTITY + DEPLOY_UNDEPLOY permission

​

Related Documentation

• Set JWK Validation - Assign JWK for validation and signing
• Set JWK Encryption - Assign JWK for decryption and encryption
• List Credentials - List all credentials